Self-Sustaining Security Architecture for Cyber Physical Systems

Properly securing a CPS requires protecting the integrity of: (1) the command & control functions and the sensory data collected from the CPS; and (2) the critical physical assets such as drones, airplanes, satellites, etc. The risk management approach that has worked so well in the information era - “deploy, patch and update� model - is no longer a viable solution for high consequence systems such as CPSs. In particular, the current cyber security solutions are highly susceptible to and ineffective against zero-day exploits . It is imperative that a new model of CPS security is self-sustaining and does not rely on continual updates or input from subject-matter experts (SMEs) to prevent a high consequence impact (loss of critical infrastructure and human lives) where compromise is not an option.